CVE-2007-0427: Microsoft Html Help Workshop

High severity, CVSS 9.3. EPSS: 31.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a help project (.HPJ) file with a long HLP field in the OPTIONS section.

Affected products

• Microsoft Html Help Workshop: version 4.03.0002 only

Published 2007-01-23. Last modified 2026-06-16.